full-disclosure - Re: New tool for pentesting

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <179324.6589.qm@web28409.mail.ukl.yahoo.com>
Date: Fri, 17 Sep 2010 11:15:04 +0000 (GMT)
From: Hurgel Bumpf <l0rd_lunatic@...oo.com>
To: full-disclosure@...ts.grok.org.uk, runlvl <runlvl@...il.com>
Subject: Re: New tool for pentesting

ORLY?

This screenshot

http://www.faltaenvido.org/wp-content/uploads/2010/09/mainimage.jpg

reminds me somehow of
 
http://www.metasploit.com/modules/exploit/windows/ftp

"This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11 and earlier. EasyFTP fails to check input size when parsing 'CWD' commands, which leads to a stack based buffer overflow. EasyFTP allows anonymous access by default;"

You didn't even bother to write your own stuff?

Pen-Testing has nothing to do with pressing buttons or a fancy looking gui.
Nor shouldn't it ripoff open source solutions and selling it for money. 

dude...



--- runlvl <runlvl@...il.com> schrieb am Do, 16.9.2010:

> Von: runlvl <runlvl@...il.com>
> Betreff: [Full-disclosure] New tool for pentesting
> An: full-disclosure@...ts.grok.org.uk
> Datum: Donnerstag, 16. September, 2010 22:02 Uhr
> A new product was born, similiar to
> Core Impact, Metasploit and Immunity Canvas.
> INSECT is affordable, easy to use and it has a friendly
> user
> interface. It promises to be an excellent tool and it
> allows
> organizations of all sizes to conduct comprehensive
> penetration
> testing across their infrastructure and applications.
> 
> INSECT's interface is designed to be usable by individuals
> both with
> and without specialized training in penetration testing
> and
> vulnerability assessment, and includes functions for
> generating
> reports from the gathered information.
> 
> See more at: http://www.faltaenvido.org/
> Watch videos at: http://www.youtube.com/user/FaltaEnvidoVideo
> 
> Regards
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/